Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Mathias Bliemeister
Computer Dienstleistungen
Wedeler Chaussee 38a
25492 Heist
Germany

Phone: +49 4122 98 17 232
Email: contact@natureaffairs.com

No data protection officer has been appointed, as this is not required by law. For data protection matters, please contact the controller directly.

2. Overview

This website provides information about tree protection and about the Punkybunkys as digital art and a community. No shop or payment method is integrated here. A mere visit typically generates only the server log data required for operation. Non-essential cookies or external content are only to be set or loaded if you have given your consent.

3. Hosting

This website is hosted by the following provider:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

The servers are located in Germany. The provider processes data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is to be concluded with the provider; All-Inkl makes a corresponding data processing agreement available in its customer portal.

The legal basis for using a hosting provider is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of this website.

4. Server log files

When you access this website, the web server automatically collects data transmitted by your browser. This typically includes:

• IP address of the requesting device
• date and time of the request
• requested address or file
• HTTP status code and amount of data transferred
• referrer (previously visited page, if transmitted)
• browser type and version, operating system and other common user-agent information

This processing serves to ensure the operation of the website, to monitor system security and stability, and to trace any attacks. The legal basis is Art. 6 (1) (f) GDPR. These data are not merged with other data sources unless a specific security incident requires it.

Log files are generally deleted after seven days at most. Logs that are required for the further investigation of attacks or malfunctions may be retained for longer.

5. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption for data transmission. You can recognize an encrypted connection by the padlock symbol in your browser’s address bar and by “https://” at the beginning of the address.

6. Cookies and consent

Cookies are small text files stored on your device. Technically necessary cookies may be set insofar as they are required to operate the website or to store your consent decision (Art. 6 (1) (f) GDPR, and where applicable § 25 (2) TDDDG, the German Telecommunications Digital Services Data Protection Act).

Non-essential cookies, audience measurement, marketing or the loading of external third-party content only take place if you have given your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw any consent you have given at any time with effect for the future, for example via the notice or the settings of the consent banner.

No analytics or advertising software is currently integrated. Where a consent banner (cookie notice) is used, it typically sets a technically necessary cookie itself in order to store your decision. Once the banner has been set up, the services and storage periods listed there are authoritative; this policy will be updated in the event of material changes.

WordPress may set cookies for logged-in users for authentication and for displaying the administration interface. For ordinary visitors to the public pages, this is generally not required.

7. Contact by email or phone

If you contact us by email or phone, we process the information you provide (such as your email address, name, phone number and the content of your message) in order to handle and respond to your inquiry.

The legal basis is Art. 6 (1) (b) GDPR insofar as your inquiry relates to the conclusion or performance of a contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in handling incoming inquiries). If your inquiry relates to the conclusion of a contract, the information is required to that extent; if it is missing, we may not be able to respond, or not fully.

The data are deleted once it is clear from the correspondence that the matter has been conclusively resolved and no statutory retention obligations stand in the way. A contact form is currently not integrated. Should one be added, this privacy policy will be updated.

8. External links, in particular OpenSea

We link to external services, including the Punkybunky collection on OpenSea (opensea.io/collection/punkybunky). These links are ordinary hyperlinks. We do not integrate OpenSea via iframe, script or any comparable embedding, and no content from OpenSea is loaded when you merely visit this website.

If you follow such a link, you leave our website. The terms of use and privacy notices of the respective third party apply. OpenSea is operated by Ozone Networks, Inc. (USA). Data may be transferred to the United States or other third countries that do not offer a level of data protection comparable to that of the EU. There is no legal basis for such a transfer by us, because we do not integrate the platform; processing by the third party only begins when you deliberately visit its service.

Should we later provide embeds or other non-essential third-party content, this will only happen with your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). This policy will then be supplemented accordingly.

9. Fonts

Wherever possible, we use fonts locally, i.e. served from this web server. Automatic loading of fonts from servers of Google Ireland Ltd. or Google LLC (“Google Fonts”) is not intended. Should a theme or plugin nevertheless attempt to do so, this must be switched off; until then, such loading would be impermissible without consent.

10. Comments and newsletter

The comment function is currently not enabled. No newsletter is currently offered. Should these functions be set up later, we will provide information here about the data processed, the legal bases and storage periods.

11. Your rights

Provided the statutory requirements are met, you have the following rights:

• the right of access to the personal data concerning you (Art. 15 GDPR)
• the right to rectification of inaccurate data (Art. 16 GDPR)
• the right to erasure (Art. 17 GDPR)
• the right to restriction of processing (Art. 18 GDPR)
• the right to data portability (Art. 20 GDPR)
• the right to object to processing based on Art. 6 (1) (e) or (f) GDPR (Art. 21 GDPR)
• the right to withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal (Art. 7 (3) GDPR)

An informal message to the contact details above is sufficient to exercise these rights.

Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6 (1) (e) or (f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

12. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

The authority generally responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany
Phone: +49 431 988-1200
Email: mail@datenschutzzentrum.de
Website: www.datenschutzzentrum.de

13. Obligation to provide data; no automated decision-making

There is no statutory or contractual obligation to provide us with personal data merely in order to read this website. The temporary processing of the data listed under server log files is required for technical access. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

14. Storage period (general)

Unless a more specific storage period is stated in the sections above, we process personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations (for example under commercial or tax law). The data are then deleted or their processing is restricted.

15. Changes to this policy

We will amend this privacy policy if the technical or legal circumstances or our services change materially. The version published on this page applies.

Last updated: November 15, 2026